Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
CM Download Manager <= 2.0.3 - Code Injection
WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds < 3.0 - SQL Injection
Contact Form by WD – responsive drag & drop contact form builder tool <= 1.7.18 - Authorization Bypass
WordPress Classifieds Plugin – Ad Directory & Listings by AWP Classifieds < 3.0 - Cross-Site Scripting
Link Library <= 5.8.10.6 - Reflected Cross-Site Scripting
ThemeBlvd Themes/Plugins (Various Versions) - Missing Authorization Checks
Contact Form Clean and Simple < 4.4.1 - Cross-Site Scripting
Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress <= 2.8.6 - Reflected Cross-Site Scripting
Smart Forms – when you need more than just a contact form <= 2.1.0 - Missing Authorization
WP Photo Album Plus <= 5.4.17 - Reflected Cross-Site Scripting
BulletProof Security < .51.1 - Server-Side Request Forgery
Contact Bank – Contact Form Builder for WordPress <= 2.0.69 - Stored Cross-Site Scripting
All-in-One WP Migration <= 2.0.2 - Authorization Bypass to Arbitrary File Upload
Store Locator 2.3 - 3.11 - SQL Injection
BulletProof Security < .51.1 - Cross-Site Scripting
WP Support Plus Responsive Ticket System <= 4.0 - JavaScript Injection
Plone and Zope2 do not reseed pseudo-random number generator
post highlights 2.0 - 2.6 - Cross-Site Scripting
Database Backup for WordPress <= 2.2.4 - Missing Authorization
WP eCommerce <= 3.8.14.3 - Missing Authorization
Profile Builder <= 2.0.2 - Reflected Cross-Site Scripting
Album and Image Gallery with Lightbox – Flagallery Photo Portfolio < 4.25 - Sensitive Data Exposure
Django-piston and Django-tastypie do not properly deserialize YAML data
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.